x-chat-provider
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide and template repository for the @ant-design/x-sdk. All identified external resources, such as NPM packages (@ant-design/x, @ant-design/x-sdk) and domains (ant.design), are official resources belonging to the vendor and verified providers.
- [DATA_EXFILTRATION]: The skill involves network operations using the XRequest utility to communicate with AI model providers. This is the primary intended purpose of the skill. Sensitive information like API keys are represented by safe placeholders (e.g., 'your-api-key', 'your-token'), and instructions advise against hardcoding real secrets.
- [COMMAND_EXECUTION]: No arbitrary command execution or shell scripts were detected. The technical instructions focus on React/TypeScript implementation logic within the browser-based UI framework.
- [REMOTE_CODE_EXECUTION]: No patterns of downloading and executing remote scripts were found. All code snippets are intended for local development and compilation.
- [PROMPT_INJECTION]: No evidence of malicious prompt injection or instructions to bypass AI safety filters was found in the documentation or implementation templates.
Audit Metadata